This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: SloRy6q3Zzf+O3Zm4vRkOxdyj0ba0afA7eqFJLMbgIw= Subject key identifier: 5C:7F:AF:FA:EF:C1:86:A3:46:E8:35:1A:24:4B:EB:90:D2:F5:6E:96 Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F4328584BE79AE5D6942DB17440ACADC0 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 192.43.188.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e7:9a:e5:d6:94:2d:b1:74:40:ac:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=48059b9c-61f1-4910-a9fb-461dfe197457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:9e:22:f5:fd:43:79:8a:6b:88:fa:58:0c: 3d:19:90:4d:98:93:82:e5:89:0a:b3:ef:4f:c3:1e: 43:7e:b9:c2:3b:4b:8c:4d:1f:c0:e7:89:9a:46:d2: 74:19:41:12:55:90:a0:23:a8:8b:1c:e0:5f:f8:5d: 76:72:21:9f:b1:02:dd:06:f9:69:b5:b9:45:3c:be: 36:b3:bb:e3:97:d8:f3:5b:08:47:ab:ba:e8:01:5c: b3:75:a6:4d:09:0b:a9:8d:17:13:49:09:4e:14:e6: 25:33:13:5c:88:07:29:92:87:2f:65:97:8d:30:31: 47:39:bc:b9:01:8d:b3:ba:14:2e:0f:a6:a8:16:66: 1b:8f:a6:17:6c:e9:9b:23:35:64:19:17:86:70:d0: 07:c3:e3:89:0a:2d:3c:a9:d0:72:dd:95:a0:8b:1c: 4a:1c:29:78:3a:cd:db:6c:8d:f8:d2:0b:39:0e:09: 54:53:f1:98:41:f8:67:0e:e6:55:9a:4d:b5:b1:50: 3e:a6:9b:e8:e3:d0:e8:b7:12:59:34:f6:1c:22:aa: 3e:f8:50:1f:23:47:47:8a:44:74:1a:9c:0c:ec:3c: 24:7c:f6:b7:17:f3:a6:6d:12:2f:45:0c:93:87:2a: 6d:28:48:fc:7e:a2:d8:ce:18:7a:82:f3:84:b8:c5: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7F:AF:FA:EF:C1:86:A3:46:E8:35:1A:24:4B:EB:90:D2:F5:6E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.43.188.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fe:e5:5c:9e:7b:6e:1b:0b:2e:74:2e:e7:4a:79:e4:72:d1: b8:73:09:c1:3a:ef:6b:35:35:0d:2d:54:a5:c3:cd:54:08:a5: 40:f3:79:fa:62:21:56:d8:f5:e5:48:05:33:c7:1f:b4:6a:09: e6:0f:3d:80:e5:6f:4d:8f:05:20:5f:61:12:d1:cc:1a:3a:ce: ea:0a:01:31:94:46:a5:9a:9d:01:69:71:24:a3:fb:36:c7:b0: 07:43:b2:9c:81:05:52:82:31:38:23:56:12:57:07:14:a9:ee: 29:b8:8e:8a:6d:81:5e:ec:15:cd:54:6e:e4:c5:66:89:b0:f7: 6b:10:1d:95:f5:34:47:d8:a2:10:a6:3d:e1:86:86:42:f7:4f: 2a:90:ae:7e:ce:fd:e8:a8:bc:91:d2:9f:32:f9:60:af:70:2d: e9:1e:42:67:fe:cc:9e:a3:c7:b1:20:6d:dc:9d:b1:29:75:95: e2:19:db:bf:8d:b6:5a:79:23:0e:63:9e:bb:12:5f:f7:a1:84: 30:aa:cc:50:89:84:4e:0b:7d:ef:4a:69:0d:c3:95:15:6e:83: d6:bd:65:91:7b:79:53:6a:e4:91:1f:93:5e:74:2f:db:c5:b8: 6d:71:58:9e:a3:7e:9f:20:a8:c7:ef:20:87:45:4e:d8:8a:1f: 4b:fa:9a:61 -----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgIUAQ0Mn0MoWEvnmuXWlC2xdECsrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NDgwNTliOWMtNjFmMS00OTEwLWE5ZmItNDYxZGZlMTk3NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVSeIvX9Q3mKa4j6WAw9GZBNmJOC5YkKs+9P wx5DfrnCO0uMTR/A54maRtJ0GUESVZCgI6iLHOBf+F12ciGfsQLdBvlptblFPL42 s7vjl9jzWwhHq7roAVyzdaZNCQupjRcTSQlOFOYlMxNciAcpkocvZZeNMDFHOby5 AY2zuhQuD6aoFmYbj6YXbOmbIzVkGReGcNAHw+OJCi08qdBy3ZWgixxKHCl4Os3b bI340gs5DglUU/GYQfhnDuZVmk21sVA+ppvo49DotxJZNPYcIqo++FAfI0dHikR0 GpwM7DwkfPa3F/OmbRIvRQyThyptKEj8fqLYzhh6gvOEuMWWiQIDAQABo4IDhjCC A4IwHQYDVR0OBBYEFFx/r/rvwYajRug1GiRL65DS9W6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3AwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADAK7wDBADANEYDBADAQV8DAwDMeTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8/uVcnntuGwsudC7nSnnkctG4cwnBOu9rNTUNLVSlw81UCKVA83n6 YiFW2PXlSAUzxx+0agnmDz2A5W9NjwUgX2ES0cwaOs7qCgExlEalmp0BaXEko/s2 x7AHQ7KcgQVSgjE4I1YSVwcUqe4puI6KbYFe7BXNVG7kxWaJsPdrEB2V9TRH2KIQ pj3hhoZC908qkK5+zv3oqLyR0p8y+WCvcC3pHkJn/syeo8exIG3cnbEpdZXiGdu/ jbZaeSMOY567El/3oYQwqsxQiYROC33vSmkNw5UVboPWvWWRe3lTauSRH5NedC/b xbhtcVieo36fIKjH7yCHRU7Yih9L+pph -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:38 2025 by rpki-client